Docs/Plans: Difference between revisions

← Older edit

Docs/Plans (view source)

Revision as of 23:41, 18 August 2026

801 bytes added , 18 August

Removed completed plans and added new plans for server/infra upgrades

Simone

Bureaucrats, Interface administrators, Administrators

10

edits

Revision as of 16:53, 30 October 2025 (view source) D2wn (talk \| contribs) mNo edit summary Tag: Visual edit ← Older edit		Latest revision as of 23:41, 18 August 2026 (view source) Simone (talk \| contribs) (Removed completed plans and added new plans for server/infra upgrades) Tag: Visual edit
(One intermediate revision by one other user not shown)
#Formally acquire and install new servers (R640s) ~~# 10 Gb/s backbone for internal network~~ ## Repair shipping damage on the 8-bay machines ~~## Install all Dell Daughterboards~~ ### Put the bent metal back into shape so they can fit cleanly in the rack ~~## Program FiberStore SFP Sleds~~ ### One of them has board damage and can only take a single X16 card, but it still works and shouldn't be an issue for our use case ~~# Rearrange servers~~ #### Maybe make sure the damaged traces don't short out? ~~## Mirrors/Leskinen on bottom of our space~~ ## Buy CPUs for the 10-bay machine ~~## Maho right above~~ ### Xeon Gold 6240s are cheap used ## Proxmox cluster▼ # Firewalls ~~## Shell~~ ## Migrate firewall duty to Okabe and Kurisu ~~## Lasagna/Ravioli on very top (OPNSense servers)~~ ## Decommission old firewall servers (lasagna and ravioli) ~~# Redo Proxmox~~ # Finish unlocking [[Locked HGST drives]] ~~## Change storage from local replication to either Ceph, or iSCSI/NFS via Leskinen~~ ## Replace all laptop drives in the cluster ▲## Proxmox ~~cluster~~ ## Remove/decommission one of the R630s to make room ## Redistribute RAM and install new R640s, add them to the cluster ## 3D print needed 2.5" drive trays ## Ceph? (maybe) ### Change VM storage from NFS via Leskinen to Ceph on cluster ### Backup to Leskinen instead of cluster ## Figure out firewalling local network from VMs for VPS idea (able to give people an ""unmanaged VM"", it should not be able to access any other VMs on the local network) ### New subnet? (10.10.2.0/24) ### Reverse-NAT via OPNSense (and mandatory DHCP) so we don't have to trust people to statically assign themselves the right public IP? # Mirrors ~~# Fix Mirrors LAN/WAN IP (currently only on WAN, via DHCP)~~ ## Upgrade CPUs to the Xeon 2680 V4s from the decommissioned R630 # Pterodactyl▼ ## Try to do it with as little downtime as possible.. ▲# Pterodactyl (?) # Faceplates for servers ## Stickerbomb idea! ## Can 3D print some of the faceplates instead of buying them # Consider hosting authoritative DNS resolver for linuxusers.group on our infra▼ # Finish OPNsense transition ## Automated domains via dhcp hostnames in opnsense▼ ##DNS for internal services # LDAP (on Leskinen?)▼ ##1:1 NAT for public services (not mirrors) ~~## Tie into iDrac/Switches~~ ▲# #Consider hosting authoritative DNS resolver for linuxusers.group on our infra ~~## VM/Proxmox/OPNSense/Debian servers (Leskinen, Maho, Mirrors)~~ ▲### Automated domains via dhcp hostnames in opnsense (?) ~~## Everything but Shell (and maybe Wiki) so alums can have access~~ ##Network booting for servers/VMs (?) ▲# LDAP (on ~~Leskinen?~~cluster) ## Integrate logins for Shell, LUG VMs, and other servers ## Already set up: ### OPNSense, Proxmox, and iDRACs # Document, document, document. ## Netbox?